ladgertvwallet[.]gitbook[.]io

The domain ladgertvwallet.gitbook.io is currently flagged as an active crypto drainer with a high risk rating. Analysis indicates that the site is registered through Cloudflare, Inc. and is protected by a Google Trust Services / WE1 SSL certificate. Network resolution points to the IP address 172.64.147.209, which belongs to AS13335 (Cloudflare) and is geolocated in the United States. The domain was created on February 21, 2026 and returns an HTTP 403 status code, suggesting that direct content retrieval is blocked or restricted. Technical fingerprints reveal the use of Cloudflare’s HTTP/3 protocol, confirming that the infrastructure relies on Cloudflare’s edge services for performance and obfuscation. Threat intelligence from PhishDestroy classifies the site under the crypto scam category, specifically a crypto drainer, and the domain appears on one known blocklist. VirusTotal analysis shows that 14 out of 93 security vendors have flagged the domain, reinforcing the malicious assessment. Additionally, Gridinsoft assigns a trust score of 0 out of 100, indicating a lack of confidence in the site’s legitimacy. While the exact payload or luring vector has not been disclosed, the combination of a newly registered domain, a low trust score, multiple vendor detections, and the presence of Cloudflare‑managed infrastructure aligns with typical patterns of crypto‑draining operations. Defenders should block the domain at network perimeters, add the associated IP address to deny lists, and monitor for any outbound connections attempting to contact the endpoint. Continuous re‑evaluation is advised, as further samples or associated URLs may emerge that provide deeper insight into the malicious workflow.